Jump to content

Windows Live Messenger

From Wikipedia, the free encyclopedia

This is an old revision of this page, as edited by 88.114.216.26 (talk) at 10:29, 18 March 2008. The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

For the current instant messaging client for Microsoft Windows, see Windows Live Messenger.
File:Msn 001..PNG
Developer(s)Microsoft
Stable release
7.0.0820 / September 11, 2007
Operating systemMicrosoft Windows, Mac
TypeInstant messaging client
LicenseFreeware
Websitehttp://webmessenger.msn.com

MSN Messenger is a freeware instant messaging client that was developed and distributed by Microsoft in 1999 to 2005 and in 2007 for computers running the Microsoft Windows operating system (except Windows Vista), and aimed towards home users. It was renamed Windows Live Messenger in February 2006 as part of Microsoft's Windows Live series of online services and software.

MSN Messenger is often used to refer to the .NET Messenger Service (the protocols and server that allow the system to operate) rather than any particular client.

Version Overview

MSN Messenger 1 (1.0.0863)

The first product release, released July 22, 1999. It included only basic features, such as plain text messaging and a simplistic contact list.

When MSN Messenger was first released it featured support for access to America Online's AIM Network. America Online continually tried to block Microsoft from having access to their service until eventually the feature was removed, and has not re-surfaced in any later versions of the software.[1] Now the software only allows connections to the .NET Messenger Service, requiring a Microsoft Passport Network account to connect, as well as limited contact with Yahoo Messenger.

MSN Messenger 2 (2.0.0083)

File:MSN Messenger 2.0 screenshot.png
MSN Messenger 2.0 Before signing in

Released November 16, 1999. Included a rotating advertising banner and the ability to slightly customize the appearance of the chat window. It came as an install option for Windows Me.

MSN Messenger 3 (3.0.0080)

Released May 29, 2000. Included file transfers, PC to PC and PC to phone audio capabilities with Net2Phone, one of the first VOIP providers.

MSN Messenger 4.6

Released October 23, 2001. Included major changes to the user interface, ability to group contacts and support for voice conversations. In this version it was renamed from the old "MSN Messenger Service" to just "MSN Messenger".

MSN Messenger 4.6 was based on Windows Messenger 4.0 and ran only on Windows 9x, ME, NT and 2000. Windows Messenger was provided for Windows XP.

MSN Messenger 5

Released October 24, 2002. Included UPnP (Universal Plug and Play) based file transfers and minor changes to the user interface artwork. This was the first version that was allowed to run alongside Windows Messenger on Windows XP, also Windows Media Player interface plug-in. MSN Messenger 5 no longer works on operating systems earlier than Windows 95.

MSN Messenger 6

Released July 17, 2003. MSN Messenger 6 was a major overhaul of the whole platform, upgradings its simple text-based interface to include customizable elements such as emoticons, personalized avatars and backgrounds.

MSN Messenger 6.1

Released October 23, 2003. This version focused on the conversation window, enabling users to hide the window frame and menu bar, and also the ability to change the theme colour of the window. The theme colour can be set differently for each user. The protocol version was also updated to MSNP version 10.

MSN Messenger 6.2

Released April 22, 2004. This was the last version of the MSN Messenger 6 series, most notable changes were contacts with mobile capabilities were more distinguishable (including a dedicated Mobile group), a connection trouble-shooter and the Launch Site feature was renamed to Fun & Games..

MSN Messenger 7.0

Released April 7, 2005. Brought along the winks features, which was previously only available in threedegrees. This version also advertises items to sell to you including animated display pictures, emoticons and backgrounds. The contact list window style was also updated to match instant message windows. This version also introduced the Xbox Live Integration feature. This is the last major MSN Messenger version for Windows 98 and Windows Me.

MSN Messenger 7.5

Released August 23, 2005. Introduced an updated Passport credentials system. New features are the Dynamic Backgrounds feature, Voice Clips and the msnim protocol handler, allowing Web sites to provide links which automatically add a contact or start conversations (for example clicking on link msnim:chat?contact=login@passport.net will start chat conversation with user login@passport.net). The Voice Clip feature lets you hold down F2 and record a message for a maximum of 15 seconds and send it to the recipient. The window for conversations changed slightly with a Video button and a different position for the webcam icon (under the display picture). This version runs on Windows XP and later. With the release of version 7.5, MSN Messenger started using Windows Installer for its auto-update feature.[2] When a user selects yes to an update prompt upon sign in, the application will download an MSP file specific to updating that version to the latest and execute in the background. The largest patch thus far is 1.5MB, relatively smaller than downloading the entire MSI installation package.

This version is no longer available for use, as when the user attempts to sign in, they are prompted with a message which forces them to download Windows Live Messenger, as a result of a security vulnerability. However, users who don't want to change to Windows Live Messenger can set the compatibility mode of the msnmsgr.exe file (which can usually be found in C:\Programs\MSN Messenger) to "Windows 2000", and MSN 7.5 can still be used with Windows XP.[citation needed]

MSN Messenger 7.0.0820

Released September 12, 2007. The release was the result of a reported security vulnerability discovered in versions of Messenger older than 8.1. The vulnerability "could allow remote code execution when a user accepts a webcam or video chat invitation from an attacker. An attacker who successfully exploited this vulnerability could take complete control of the affected system." This led to an auto-update being released to all MSN Messenger versions. Users of MSN Messenger 7.0 and below were required to update to this version, and 7.5 users were required to update to WLM 8.1, though had the option of using this version instead.[3]

Windows Live Messenger

MSN Messenger was renamed to Windows Live Messenger upon its eighth version release in February 2006.

MSN Web Messenger

MSN Web Messenger is a browser-based messaging program that allows MSN users to instant-message people on their contact list, from computers that do not or cannot have the program installed (ie public computers). Web Messenger was launched in August 2004, and is convenient for people who are using the internet away from home, or own computers that are some way incompatible with the MSN program. On the contact list for MSN Messenger users, the status of somebody using Web messenger is either displayed as a globe, or by appending the word (Web) after their name, depending on the version of MSN Messenger used.

Protocol

MSN Messenger uses the Microsoft Notification Protocol (MSNP) over TCP (and optionally over HTTP to deal with proxies) to connect to the .NET Messenger Service — a service offered on port 1863 of messenger.hotmail.com. Its current version is 13 (MSNP13), used by MSN Messenger version 7.5 and other third-party clients. The protocol is not completely secret; Microsoft disclosed version 2 (MSNP2) to developers in 1999 in an Internet Draft, but never released versions 8, 9, 10, 11 or 12 to the public. .NET Messenger Service servers currently only accept protocol versions from 8 and on, so the syntax of new commands from versions 8, 9, 10, 11 and 12 is only known by using sniffers like Wireshark. MSNP13 will be the protocol used in Windows Live Messenger. This program is still not compatible with mac OSX 10's browser as of yet.

Xbox Live integration

As of MSN Messenger 7.0, the client now offers a level of integration with Microsoft's Xbox Live Internet Gaming service. Users of MSN Messenger can go to the Xbox Website and link their gamertag to Microsoft's .NET Passport network. This will allow MSN Messenger to report the user's Xbox Live friends list, as well as allow them to send game invitations to players, so that the user does not have to be on Xbox Live in order to arrange games. This feature goes along with Microsoft's continuing goal to place integration between their various services. After December 2, Xbox Live Integration had temporarily malfunctioned. This was due to the change in hardware and protocol brought with the release of the Xbox 360. The error was soon corrected. The Spring 2007 Update for Xbox 360 allowed MSN users and 360 users to chat simultaneously, and even lists what game is being played by an Xbox Live user to their MSN Messenger friends. This functionality does not include video or audio chat between Xbox live users and MSN users.

Games and Applications

MSN Messenger shares the same games and applications as Windows Live Messenger.

Competition

The most significant rivals of MSN Messenger are AIM and ICQ (both from AOL), Skype, Pidgin (previously known as Gaim), and Jabber based clients including Google Talk.

In China the predominant instant messenger is QQ. Although little used outside China, its domestic users number as high as 270 million {{[Fact]http://www.plus8star.com/?p=99%7Cdate=January 2008}}. QQ's popularity has been greatly weakened since MSN Messenger entered the Chinese market [citation needed]. MSN Messenger has about 17 percent of the Chinese market to date and this figure is increasing[citation needed].

On October 13, 2005, Yahoo! and Microsoft announced plans to introduce interoperability between their two messengers,[4] creating the second largest instant messenger userbase worldwide: 40% of all users (AIM currently holds 56%). The announcement comes after years of 3rd party interoperability success (most notably, Trillian, Pidgin) and criticisms from Google that the major instant messengers were locking their networks. This interoperability became available in the next version of MSN Messenger, which was renamed Windows Live Messenger.

Microsoft has also had talks with AOL in an attempt to introduce further interoperability, but so far, AOL seems unwilling to participate.[citation needed]

Criticism

The protocol is closed and Microsoft has made two attempts to lock out third-party clients by requiring data transformed by the use of hash functions when connecting. However, both algorithms have been reverse-engineered.

Since MSN Messenger's release, it has been targeted entirely towards Windows users, leaving Macintosh users with a limited client, however, numerous third party applications now offer webcam, winks and nudging support for Mac users. [citation needed]

Linux users have also been effectively left in the dark, requiring third party software to log in and access their profile stored on the MSN Messenger servers. Such third party software is usually one of many alternative instant messaging clients, such as emesene, aMSN, KMess, Pidgin, Mercury, PlanetaMessenger.org, Licq or Kopete. Pidgin and Kopete are included in many Linux distributions, supporting a range of other instant messaging protocols, such as the AOL, Yahoo! and ICQ clients.

MSN Messenger contains an advertising bar as standard; some other IM programs (Pidgin, Trillian etc) do not. Although this is also reverse-engineered and deleted with a patch, critics consider the interface cluttered, with no options to edit it in an unmodified version. [citation needed]

Another criticized aspect of MSN Messenger is the type of ID used. Unlike other message clients, MSN users are identified by an email address. Therefore, posted MSN IDs can be harvested for junk email. This can pose a problem for users who wish to release their messaging handle but not their email address.

Security, and the risk of computer infection through IM-borne viruses or spyware, has also been a persistent concern for users of MSN Messenger (and other IM networks). See "Malware" below, and more details in the section entitled "Risks and Liabilities" in Instant Messaging.

When comparing with Yahoo's version of their instant messaging tool, Yahoo! Messenger, there was noticeable evidence that Microsoft were suspiciously one step behind[5] in their offering of new features. Such examples were MSN Messenger's nudges being similar in concept to Yahoo's Buzzes[6] (which were offered since June 2002), winks being a more primitive form of Yahoo's audibles[7] (available since May 2003), web messengers being introduced after Yahoo's introduction in June 2003:[8] (that allowed IM access from a web browser), and the introductions of two-player games and avatars also being later than that of Yahoo's.

MSN Messenger also requires Internet Explorer to be set on "online" status, while other IM only require internal settings.

Malware

MSN Messenger (along with other networks such as its successor Windows Live Messenger, Yahoo! Messenger and AOL Instant Messenger) is often used as a conduit or "vector" for delivering malicious software such as spyware, viruses, worms, and trojans to unsuspecting computer users. The two methods used by hackers to deliver malware over the IM vector are (1) sending a file transfer with a virus-infected file, and (2) delivering a message with socially engineered content containing a web address (URL) containing active malicious code. Viruses and worms with colorful names such as W32.Yalove or Troj/Msnfake-L have been identified as targeting users of the MSN Messenger network over the past few years.

The threat of infection by these two methods is substantial and growing. The IM Security Center, a collaboration between security companies and corporations, has tracked attacks over IM since 2003 and shows well over 1000 distinct attacks over the public IM networks. The first half of 2007 saw an 84% increase in IM attacks over the first half of 2006. While IM-specific attacks remain a small percentage of overall virus and malware threats, the continued growth in usage of IM, along with the rapid adoption of IM in the workplace (See Instant Messaging) make IM an attractive vector for malicious hackers, and both individuals and companies must take precautions to avoid infection.

The most common method of delivering a malicious payload is the use of social engineering to construct a message that appears to be coming from a contact on the recipient's contact list. A socially engineered message is one that is written in a friendly, informal manner, that could easily be mistaken as coming from a friend. The message usually will say something like "Click here to see pics of me from vacation!" or "Is this you?" with a web address -- known as a "poison URL" -- for the recipient to click. Upon clicking the web address, the recipient is connected to a website containing active content, which is immediately downloaded to the recipient's computer. In most cases, the payload contains an installer, a number of hidden files containing text, and code which causes the same socially engineered message with poison URL to be sent to every contact on the contact list. When the message is sent to all contacts, the cycle starts again, as each contact believes they are receiving a message from a trusted friend. In this manner, IM-borne malware is capable of propagating very rapidly through company and external networks.

Worms and viruses are discovered on a regular basis by security companies, particularly by the three companies with IM-specific security products, Akonix Systems, FaceTime Communications, and Symantec. According to IM security researchers at Akonix and other security firms, the average number of new threats identified each month is 30 to 35, with a high of 88 in October, 2006.

Filtering controversy

Following the release of version 7.0+, there was a major uproar about certain messages being unable to be delivered through the Messenger network.[9] Messages containing ".info", "download.php", "gallery.php", "profile.php?", ".pif", ".scr" or ".script" (and many other extensions, filenames and URLs) closed the connection of the conversation, returned a "Failed to deliver message" or simply didn't appear, depending on the version of the client the person had downloaded.

The original intention of this filtering was to help prevent users from falling foul of malicious users, who often use URLs containing the filtered text to trick users into downloading viruses or spyware.

A similar concept is "Shield Up", which allows the Messenger servers to send the client a list of blocked links and disabled features upon sign in. This method was introduced after vulnerabilities were found in the first versions that introduced Flash content (such as Winks, Dynamic Display Pictures, etc.).

Also many usernames were not allowed by the program. This included conventional profanities but also extended to stranger words such as "System" and "Mail". These bans seem to have been lifted with the advent of Windows Live Messenger [citation needed]

See also

References

  1. ^ "AOL blocks Microsoft Net messaging". CNET News.com.
  2. ^ "Patching". Microsoft Developer Network.
  3. ^ "MSN Messenger 7.0.0820 now available for Windows XP".
  4. ^ "Yahoo and MSN marry IM services". vnunet.com. October 13, 2005. {{cite web}}: Check date values in: |date= (help)
  5. ^ "Wikipedia Article - History of Windows Live Messenger".
  6. ^ "WebArchive.org - List of Available IMVironments". Yahoo! Inc.
  7. ^ "WebArchive.org - Yahoo! Messenger also includes". Yahoo! Inc.
  8. ^ "WebArchive.org - New Yahoo! Web Messenger (Beta)". Yahoo! Inc.
  9. ^ "Microsoft censoring MSN Messenger conversations". Arve Bersvendsen.

this is pish